DNSSEC: Insecure delegation for Google DNS zone

Hello everybody,

We have set up Google Cloud DNS for a in Cloudflare like this:

  • NS ns-cloud-a1.googledomains.c om
  • NS ns-cloud-a2.googledomains.c om
  • NS ns-cloud-a3.googledomains.c om
  • NS ns-cloud-a4.googledomains.c om

While Cloudflare DNSSEC is working, dnsviz.net shows an insecure delegation for hostnames in the Google Cloud zone. We have set DNSSEC to “On” in Google Cloud Platform but don’t really know how to securely delegate the zone from Cloudflare to GCP.

Any help is greatly appreciated!